Can MAV administrators approve their own requests?
Applies to
ONTAP, version 9.11.1+
Multi-Admin Verification
Multi-Admin Verification
Answer
MAV administrators cannot approve their own requests to execute protected operations. Therefore:
MAV should not be enabled on clusters with only one administrator.
If there is only one person in the MAV group, that MAV administrator cannot enter protected operations; regular administrators must enter them and the MAV administrator can only approve.
If you want MAV administrators to be able to execute protected operations, the number of MAV administrators must be one greater than the number of approvals required. For example, if two approvals are required for a protected operation, and you want MAV administrators to execute them, there must be three people in the MAV administrators group.
Additional Information
additionalInformation_text